Preserve Query in nextUrl during openid login redirect

Signed-off-by: SKLEIN3 <sklein3@jaguarlandrover.com>
opensearch-project · Oct 23, 2024 · eb076a0 · eb076a0
1 parent 506d803
commit eb076a0
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 12 deletions.
diff --git a/server/auth/types/openid/openid_auth.ts b/server/auth/types/openid/openid_auth.ts
@@ -16,30 +16,29 @@
 import * as fs from 'fs';
 import wreck from '@hapi/wreck';
 import {
-  Logger,
-  SessionStorageFactory,
+  AuthResult,
+  AuthToolkit,
   CoreSetup,
-  IRouter,
   ILegacyClusterClient,
-  OpenSearchDashboardsRequest,
-  LifecycleResponseFactory,
-  AuthToolkit,
   IOpenSearchDashboardsResponse,
-  AuthResult,
+  IRouter,
+  LifecycleResponseFactory,
+  Logger,
+  OpenSearchDashboardsRequest,
+  SessionStorageFactory,
 } from 'opensearch-dashboards/server';
 import { PeerCertificate } from 'tls';
 import { Server, ServerStateCookieOptions } from '@hapi/hapi';
 import { ProxyAgent } from 'proxy-agent';
 import { SecurityPluginConfigType } from '../../..';
 import {
-  SecuritySessionCookie,
   clearOldVersionCookieValue,
+  SecuritySessionCookie,
 } from '../../../session/security_cookie';
 import { OpenIdAuthRoutes } from './routes';
 import { AuthenticationType } from '../authentication_type';
-import { callTokenEndpoint } from './helper';
+import { callTokenEndpoint, getExpirationDate } from './helper';
 import { getObjectProperties } from '../../../utils/object_properties_defined';
-import { getExpirationDate } from './helper';
 import { AuthType } from '../../../../common';
 import {
   ExtraAuthStorageOptions,
@@ -128,11 +127,14 @@ export class OpenIdAuthentication extends AuthenticationType {
   }
 
   private generateNextUrl(request: OpenSearchDashboardsRequest): string {
-    const path = getRedirectUrl({
+    let path = getRedirectUrl({
       request,
       basePath: this.coreSetup.http.basePath.serverBasePath,
       nextUrl: request.url.pathname || '/app/opensearch-dashboards',
     });
+    if (request.url.search) {
+      path += request.url.search;
+    }
     return escape(path);
   }
 

diff --git a/server/auth/types/openid/routes.ts b/server/auth/types/openid/routes.ts
@@ -101,7 +101,7 @@ export class OpenIdAuthRoutes {
                   },
                 })
               ),
-              redirectHash: schema.maybe(schema.boolean()),
+              redirectHash: schema.maybe(schema.string()),
               state: schema.maybe(schema.string()),
               refresh: schema.maybe(schema.string()),
             },